Pi-Hole: https://pi-hole.net/
Especially interesting for on-premises Cloudrons

• Network-wide ad blocking via your own Linux hardware
• Block Over 100,000 Ad-serving Domains: Known ad-serving domains are pulled from third party sources and compiled into one list.
• Block Advertisements On Any Device: Network-level blocking you to block ads in non-traditional placed such as mobile apps and smart TVs, regardless of hardware or OS.
• Improve Overall Network Performance: Since ads are blocked before they are downloaded, your network will perform better.
• Reduce Cellular Data Usage: Pair your Pi-hole with a VPN for on-the-go ad-blocking and save on data costs.
• Monitor Performance And Statistics: The Web interface shows how many ads were blocked, a query log, and more.
• API: Utilize Pi-hole’s API in your scripting or programing projects.

Docker image: https://hub.docker.com/r/diginc/pi-hole/
Pi-Hole on Docker how-to: https://dxpetti.com/blog/2018/running-pi-hole-on-docker/ (part 1) and https://dxpetti.com/blog/2018/keeping-your-pi-hole-container-fresh-with-cron/ (part 2)

Homepage: https://github.com/zadam/trilium
Screenshots: https://github.com/zadam/trilium/wiki/Screenshot-tour
Docker server installation: https://github.com/zadam/trilium/wiki/Docker-server-installation

Features

• Notes can be arranged into arbitrarily deep tree. Single note can be placed into multiple places in the tree (see cloning)
• Rich WYSIWYG note editing including e.g. tables and images with markdown autoformat
• Support for editing notes with source code, including syntax highlighting
• Fast and easy navigation between notes, full text search and note hoisting
• Seamless note versioning
• Note attributes can be used for note organization, querying and advanced scripting
• Synchronization with self-hosted sync server
• Strong note encryption with per-note granularity
• Relation maps for visualizing notes and their relations
• Scripting - see Advanced showcases
• Scales well in both usability and performance upwards of 100 000 notes
• Touch optimized mobile frontend for smartphones and tablets
• Night theme
• Evernote and Markdown import & export

Builds

Trilium is provided as either desktop application (Linux, Windows, Mac) or web application hosted on your server (Linux).

• If you want to use Trilium on the desktop, download binary release for your platform from latest release, unzip the package and run trilium executable.
• If you want to install Trilium on server, follow this page.
  • Currently only recent Chrome and Firefox are supported (tested) browsers.

From: https://docs.rsshub.app/en/

RSSHub is a lightweight and extensible RSS feed aggregator, it's able to generate feeds from pretty much everything.

Perfect companion to TT-RSS, I think.

Examples: https://docs.rsshub.app/en/#application-updates and below

Manual Deployment: https://docs.rsshub.app/en/install/#manual-deployment
Docker Deployment: https://docs.rsshub.app/en/install/#docker-deployment

I‘m a lawyer working in the field of i.a. data privacy law who is just very interested in tech and likes to run things at home. Also, the rules of our profession require us to not give data of our clients to any third party which rules the use out most US based web services.

My private Cloudron running on a ASRock Beebox N3000 at home...
Just the bare necessities for me. Waiting for Pi Hole / Wireguard and Plex!

@imc67 explained how to block IP ranges from certain countries
I think it would be useful if such lists (e.g. from https://www.ipdeny.com/ipblocks/) could be kept updated automatically, e.g. by running an update script regularly.

The same applies for spamassassin lists, e.g. the excellent Spamassassin lists from Heinlein who runs www.mailbox.org

For those who want to use Syncthing on iOS (up- / download of files, manual syncing of folders):

As you know, there's no iOS client. Inspired by this Reddit thread, I successfully configured the free iOS Documents App to access the Synthing main pool. You can probably use any App that allows SFTP connections.

• Precondition: VPN Access from the iOS device to your Cloudron instance (in my case, since Cloudron sits on a server at home, I establish a VPN connection to my router - but it should work with the Cloudron OpenVPN App as well(?)
• Open Documents, add a new SFTP connection with the following parameters (see screenshot in German below)
  • Name: Anything you want (e.g. "Syncthing")
  • Host: local IP of your Clourdon, e.g. 192.168.1.27
  • Login: SSH username
  • Password: SSH password or use "Private Key" section - Documents allows to use a private SSH key
  • Encryption: left unchanged
  • Port: SSH Port (e.g. 202)
  • Login Path: the path to your Syncthing main pool, which should be /home/yellowtent/appsdata/[APP-ID]/data/folders; you'll find the APP-ID in the "Resources" tab of your Synthing config on Cloudron

Voilá, you should see all folders you manage in Syncthing. Documents allows to mark such folders for syncing, these are then accessible in the "Sync Folders" tab and can be synced manually any time. Upload and download of files from / to Syncthing works and such changes are reflected on all machines. Downloaded files can be opened / viewed / shared within the Documents App.

I managed to migrate from my current bitwarden instance (BW OLD) to the cloudron app (BW NEW) as follows:

1. Disable 2-Factor Authentification for BW OLD (this is important!). I also removed "Organizations" in Bitwarden, I don't know if that's important, too.
2. Open the terminal for BW OLD, go to app/data/
3. Zip your attachments: zip -r attachments.zip attachments/
4. Dump your existing sqlite database: sqlite3 db.sqlite3 .dump > sqlitedump.sql
5. Drop schema creation and metadata from your dump, leaving only your actual data: grep "INSERT INTO" sqlitedump.sql | grep -v "__diesel_schema_migrations" > mysqldump.sql
6. Still in the terminal view, hit the "Download" button (top right), enter the path to the attachments and the SQL dump (app/data/attachments.zip and app/data/mysqldump.sql) and download them.
7. Open the terminal for BW NEW, go to app/data/.
8. Still in the terminal view, hit the "Upload to /tmp" button (top right), upload the previously downloaded attachments.zip and mysqldump.sql
9. Move uploaded files to data folder: mv /tmp/attachments.zip /app/data/ and mv /tmp/mysqldump.sql /app/data/
10. Unzip your attachments: unzip attachments.zip and rm attachments.zip
    11.Import SQL Dump: mysql --user=${CLOUDRON_MYSQL_USERNAME} --password=${CLOUDRON_MYSQL_PASSWORD} --host=${CLOUDRON_MYSQL_HOST} ${CLOUDRON_MYSQL_DATABASE} < mysqldump.sql (Enter like that, don't replace the variables with your username or password)
11. Hit "Restart"

You can now login with your Bitwarden credentials. All passwords and the attachments shoud be there.

It would be great if the Fulltext Search App could be included in the Nextcloud package. The app allows for fulltext search of files and bookmarks via Elasticsearch or Solr.

Homepage: https://apps.nextcloud.com/apps/fulltextsearch / https://github.com/nextcloud/fulltextsearch

Instructions: https://github.com/nextcloud/fulltextsearch/wiki

@will I think https://cloudron.io/documentation/custom-apps/tutorial/ and the following topics in that section is a good starting point...

@moocloud_matt said in Firewall / Spamassassin: Automatic list update:

@necrevistonnezr said in Firewall / Spamassassin: Automatic list update:

Spamassassin lists from Heinlein

I think that this config file is mostly oriented on German email, probably if an incoming email is in Italian or French or English wold be completely useless, this is one of the biggest issue in spam protection and having a 0% ham.

You need custom rules for every language and if you use Rspamd you also need different AI/db for every language.

I don't think so. Looking into their body cf file, you see entries like this, I'd say more than half is English:

body HS_BODY_2021		/Today is the last day to order a custom print for Christmas delivery/
describe HS_BODY_2021		Heinlein Support Spamschutz Body-2021 Spam
score HS_BODY_2021		10

body HS_BODY_2023		/Need a little help finding the right piece? Our curators are here to help/
describe HS_BODY_2023		Heinlein Support Spamschutz Body-2023 Spam
score HS_BODY_2023		10

body HS_BODY_2026		/Shop now - no minimums or promo required. Sale ends Tuesday/
describe HS_BODY_2026		Heinlein Support Spamschutz Body-2026 Spam
score HS_BODY_2026		10

body HS_BODY_2028		/globalgallery.us5.list-manage.com/
describe HS_BODY_2028		Heinlein Support Spamschutz Body-2028 Spam
score HS_BODY_2028		10

body HS_BODY_2029		/ausmisten, die Ablage wegsortieren, den Jahresurlaub buchen oder auch/
describe HS_BODY_2029		Heinlein Support Spamschutz Body-2029 Spam
score HS_BODY_2029		3

body HS_BODY_2032		/Ciao!  https:..betcb.com/
describe HS_BODY_2032		Heinlein Support Spamschutz Body-2032 Spam
score HS_BODY_2032		5

body HS_BODY_2037		/If you ignored this email your account will be Officially Permanently disabled the next/
describe HS_BODY_2037		Heinlein Support Spamschutz Body-2037 Phishing
score HS_BODY_2037		5

body HS_BODY_2040		/from AppleID./
describe HS_BODY_2040		Heinlein Support Spamschutz Body-2040 pHISHING
score HS_BODY_2040		5

body HS_BODY_2043		/http\:\/\/datingx\.co/
describe HS_BODY_2043		Heinlein Support Spamschutz Body-2043 Spam
score HS_BODY_2043		5

body HS_BODY_2045		/as one of the final recipients of the Mega million Bonanza funding/
describe HS_BODY_2045		Heinlein Support Spamschutz Body-2045 Spam
score HS_BODY_2045		5

body HS_BODY_2048		/A Sophisticated Automated Database to Randomly select/
describe HS_BODY_2048		Heinlein Support Spamschutz Body-2048 Spam
score HS_BODY_2048		5

body HS_BODY_2050		/ We Embarked on a worldwide promotion for Disabled, Employed and Unemployed Workers, Retired, Young and Old people/
describe HS_BODY_2050		Heinlein Support Spamschutz Body-2050 Spam
score HS_BODY_2050		5

body HS_BODY_2051		/the On-line director of the Mega millions Bonanza funding imposed by the United State Government/
describe HS_BODY_2051		Heinlein Support Spamschutz Body-2051 Spam
score HS_BODY_2051		5

body HS_BODY_2052		/Ihr Paket ist gerade in unserer Zentrale eingetroffen, aber wir k/
describe HS_BODY_2052		Heinlein Support Spamschutz Body-2052 Spam
score HS_BODY_2052		3

body HS_BODY_2053		/Content-Disposition: attachment; filename=DHL.*PDF.iso;/
describe HS_BODY_2053		Heinlein Support Spamschutz Body-2053 Phishing
score HS_BODY_2053		5

body HS_BODY_2054		/http.*\.icu\/ub\.php\?/
describe HS_BODY_2054		Heinlein Support Spamschutz Body-2054 Spam
score HS_BODY_2054		2

body HS_BODY_2056		/http...www.db-onlinemarketing.net/
describe HS_BODY_2056		Heinlein Support Spamschutz Body-2056 Spammer
score HS_BODY_2056		4

body HS_BODY_2059		/Firmendatenbank GC-Contact/
describe HS_BODY_2059		Heinlein Support Spamschutz Body-2059 Spam
score HS_BODY_2059		2

body HS_BODY_2061		/Eine Investition in die Firmenadressen macht sich sofort bezahlt. Sie erwerben das Nutzungsrecht am kompletten Adressenpaket./
describe HS_BODY_2061		Heinlein Support Spamschutz Body-2061 Spam
score HS_BODY_2061		2

New maintainer, new repo, and actively developed again: https://github.com/go-shiori/shiori

@imc67 explained how to block IP ranges from certain countries
I think it would be useful if such lists (e.g. from https://www.ipdeny.com/ipblocks/) could be kept updated automatically, e.g. by running an update script regularly.

The same applies for spamassassin lists, e.g. the excellent Spamassassin lists from Heinlein who runs www.mailbox.org

@d19dotca said in After multiple changes to a file on Surfer via WebDAV, further connections timeout with ETIMEDOUT:

@necrevistonnezr said in After multiple changes to a file on Surfer via WebDAV, further connections timeout with ETIMEDOUT:

If a shop doesn't offer it, I don't use it.

gasp you... you don't use... Netflix or Amazon Prime? haha

I bought Netflix through the iOS App so it's just part of my iTunes subscription.

Indeed, Amazon is directly connected to my debit account (not credit card) and they have a direct debit mandate - an "acceptable risk" since (i) I hope Amazon knows their shit security wise and (ii) my bank (as any European bank) will not accept direct debits unless you have a properly authorized direct debit mandate - you are insured against fraudulent payments.

New Release 2020.4

Some older screenshots from 2016: https://unencumberedbyfacts.com/2016/09/08/cypht-webmail-screen-shots/
Some interesting comparisons: https://wikisuite.org/Why-Cyrus-IMAP-and-Cypht

@d19dotca said in After multiple changes to a file on Surfer via WebDAV, further connections timeout with ETIMEDOUT:

Tip (you may already know of this one though): One thing I love tagging for is tagging all my records with what credit card I may have on file with them. This became invaluable a couple of years ago when I had my first "compromised" credit card which had an unexpected charge on it.

Great tip. I just never use my credit card directly, always through an intermediary (Apple Pay, Paypal, Klarna, etc.) - they were "invented" for that exact scenario. If a shop doesn't offer it, I don't use it.

Despite the last stable release being two years old, this project is very actively developed in dev-master (https://github.com/jasonmunro/cypht) and the Docker imaged referenced by @nebulon is regularly updated as well.

Some of the modules are interesting as well (https://cypht.org/modules.html) :

• 2fa: TOTP based 2 factor authentication using the Google Authenticator mobile app
• api_login: Login using an API to provide single sign on ability
  contacts: Contact management. Requires at least one contact backend module set to be enabled
• ldap_contacts: Support for contacts stored in LDAP
• dynamic_login: Allows user to authenticate against a list of popular mail services, or to auto-discover the services for the specified E-mail address
• feeds: RSS/ATOM feed support
• imap: IMAP E-mail account support
• imap_folders: IMAP E-mail folder management support
  pop3: POP3 E-mail account support
• profiles: Profiles to set reply-to, name, and signature to associated E-mail accounts
• saved_searches: Save and re-run searches easily
• tags: Tag content for easy searching/filtering. Not yet functional

@jdaviescoates was looking for tags...?

@d19dotca
Thanks, that was really interesting and helpful!

I never really used tagging and have no problem finding entries as I usually just need / search for the URL (and I have roughly 1.500 entries - lots of zombie sites accumulated over the years...). But it's interesting to see how Enpass has evolved and what else is out there.

@atrilahiji said in How do you monitor your VPS ?:

I wish I was certified cool...

You are my friend, just for that statement alone.